Dancing with Giants: Wimpy Kernels for On-Demand I/O Isolation

To be trustworthy, security-sensitive applications must be small and simple--or wimpy. Because of their limited size and functions, they must securely compose with large, untrusted commodity systems--or giants--to survive. A security architecture based on a wimpy kernel can provide on-demand isolated I/O channels for wimp applications without bloating the underlying trusted computing base.